diff --git a/.changeset/fix-nix-flake-darwin.md b/.changeset/fix-nix-flake-darwin.md
new file mode 100644
index 0000000..639476b
--- /dev/null
+++ b/.changeset/fix-nix-flake-darwin.md
@@ -0,0 +1,4 @@
+---
+---
+
+fix: remove legacy darwin.apple_sdk reference in flake.nix
diff --git a/flake.nix b/flake.nix
index 5af2b10..c00ac02 100644
--- a/flake.nix
+++ b/flake.nix
@@ -24,7 +24,6 @@
 
         darwinDeps = with pkgs; [
           libiconv
-          darwin.apple_sdk.frameworks.Security
         ];
 
         gws = pkgs.rustPlatform.buildRustPackage {
@@ -38,8 +37,8 @@
           };
 
           nativeBuildInputs = [ pkgs.pkg-config ];
-          buildInputs = pkgs.lib.optionals pkgs.stdenv.isLinux linuxDeps
-            ++ pkgs.lib.optionals pkgs.stdenv.isDarwin darwinDeps;
+          buildInputs = pkgs.lib.optionals pkgs.stdenv.hostPlatform.isLinux linuxDeps
+            ++ pkgs.lib.optionals pkgs.stdenv.hostPlatform.isDarwin darwinDeps;
 
           # Tests are disabled by default in buildRustPackage if not specified, 
           # but we'll be explicit. Some tests might require network.